$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: ZcIQa4FQK+yc9zCqtTaapRq9YzbX7cdSfznp9AxNdJ0= Subject key identifier: D8:98:9D:F7:2C:EF:0E:18:ED:03:9E:E2:7A:97:EE:CA:1C:54:47:FB Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 052B Signing time: Sun 05 May 2024 01:09:47 +0000 Manifest this update: Sun 05 May 2024 01:09:47 +0000 Manifest next update: Sun 12 May 2024 01:09:47 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: vJfPOLusnKQ3hvfy/DcdFWW6BqlWBu3HYiGjnlaLStc=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: grEMY+mmKXjDTH8MDq/fuRpBGS6ItRZRBVMuU/+L+5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: May 5 01:09:47 2024 GMT Not After : May 12 01:09:47 2024 GMT Subject: CN=6636dc5b-900c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:90:ae:8f:28:55:3a:a7:db:31:52:6f:44: 6f:97:80:23:bf:77:a5:c5:87:bb:75:7d:2a:20:9b: b4:ee:bd:d3:74:43:20:74:57:06:a9:64:7a:18:a0: 50:75:38:fa:f1:74:93:9c:73:6c:d2:86:3d:c5:8a: 30:7c:ec:b6:9b:e5:ba:29:25:f7:c9:1a:6a:95:dd: 40:3e:ed:97:05:6b:88:e7:9c:49:84:bc:9b:b2:03: 04:d5:d7:ff:58:f4:5c:c5:d3:a9:83:2e:11:90:9e: 22:ec:6e:a5:fc:4e:33:86:d3:88:6e:93:cd:22:01: 23:1c:12:2e:4b:2a:2f:5b:24:0a:7f:db:f7:cb:30: 91:40:10:95:e2:83:f7:19:b2:35:2a:73:00:f6:55: a0:e5:e4:ae:14:11:e2:e2:77:4a:fe:54:f8:47:cc: 41:d1:4e:2c:2d:8a:0e:7d:ed:0e:a3:ad:35:06:22: 0e:b3:16:40:46:f3:bc:8f:0e:8e:0c:af:3c:70:3c: f3:a6:14:4c:bc:06:2d:a3:ff:59:54:5f:e5:5c:cb: 05:d1:64:c4:32:11:bf:3a:22:b6:75:09:54:d4:c3: 8c:72:b5:60:37:12:11:09:84:63:ce:3f:9d:75:e3: 69:c5:16:8e:53:60:2c:84:85:bd:2c:d0:6e:83:5c: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:9D:F7:2C:EF:0E:18:ED:03:9E:E2:7A:97:EE:CA:1C:54:47:FB X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5c:7e:c9:05:9d:e5:90:99:ae:64:31:83:c0:61:f7:0b:10: 57:da:c6:47:0c:bd:af:01:d0:d4:76:d4:11:2e:03:b1:a5:35: 3d:d8:32:b2:40:f7:d4:65:c9:2f:50:ab:99:74:aa:f4:1c:24: 1f:bb:4d:04:e2:70:d0:f6:dc:47:06:19:c4:b8:6d:1e:e1:6d: 8e:61:f7:e7:6d:94:78:e3:12:85:55:3d:7b:51:30:cc:ed:90: ff:82:33:d8:7c:7e:fa:32:d8:81:1a:b6:ed:92:f0:42:90:b3: d0:2d:f9:c4:2b:3f:45:83:14:e1:ed:79:ec:56:dc:7c:58:13: ff:6a:76:d8:f9:8a:a0:c0:13:62:93:50:02:8a:97:dd:84:41: e2:01:86:b6:72:82:72:81:cc:52:a0:44:2f:5e:ae:22:d9:d0: ff:8d:c6:2b:8a:ef:c1:94:56:e0:78:bb:3e:2e:dd:fc:02:7c: 40:7d:eb:39:75:0c:1a:3a:8d:0f:c3:a7:b7:38:3b:0a:ca:1d: fe:30:2d:d4:9d:b7:39:9f:06:29:c5:6b:b9:c7:88:7f:fe:29: 89:57:5c:27:7e:5f:3f:9e:2d:18:93:ae:88:6e:db:8c:f4:4e: 4d:12:a9:80:23:f8:92:2a:1d:a7:30:12:e2:69:65:88:b5:2d: 93:c1:39:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjQwNTA1MDEwOTQ3WhcNMjQwNTEyMDEwOTQ3WjAYMRYwFAYD VQQDEw02NjM2ZGM1Yi05MDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTOQro8oVTqn2zFSb0Rvl4Ajv3elxYe7dX0qIJu07r3TdEMgdFcGqWR6GKBQ dTj68XSTnHNs0oY9xYowfOy2m+W6KSX3yRpqld1APu2XBWuI55xJhLybsgME1df/ WPRcxdOpgy4RkJ4i7G6l/E4zhtOIbpPNIgEjHBIuSyovWyQKf9v3yzCRQBCV4oP3 GbI1KnMA9lWg5eSuFBHi4ndK/lT4R8xB0U4sLYoOfe0Oo601BiIOsxZARvO8jw6O DK88cDzzphRMvAYto/9ZVF/lXMsF0WTEMhG/OiK2dQlU1MOMcrVgNxIRCYRjzj+d deNpxRaOU2AshIW9LNBug1w7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiYnfcs 7w4Y7QOe4nqX7socVEf7MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkXH7JBZ3lkJmuZDGDwGH3CxBX2sZHDL2vAdDUdtQRLgOxpTU92DKy QPfUZckvUKuZdKr0HCQfu00E4nDQ9txHBhnEuG0e4W2OYffnbZR44xKFVT17UTDM 7ZD/gjPYfH76MtiBGrbtkvBCkLPQLfnEKz9FgxTh7XnsVtx8WBP/anbY+YqgwBNi k1ACipfdhEHiAYa2coJygcxSoEQvXq4i2dD/jcYriu/BlFbgeLs+Lt38AnxAfes5 dQwaOo0Pw6e3ODsKyh3+MC3Unbc5nwYpxWu5x4h//imJV1wnfl8/ni0Yk66IbtuM 9E5NEqmAI/iSKh2nMBLiaWWItS2TwTn9 -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org